Route Origin Authorization

$ rpki-client -vvvf krill.as218338.eepyinsi.de/repo/as218338/0/326131343a373538333a656663353a3a2f34382d3438203d3e20323138333338.roa
File:                     326131343a373538333a656663353a3a2f34382d3438203d3e20323138333338.roa (raw, json)
Hash identifier:          rSFLeTsyRk+nOMep5FPb6EZpI6EWNt/LBT158IB0wjc=
Subject key identifier:   52:4F:5B:15:D7:25:A4:7F:E9:57:A6:0B:2C:33:17:1A:8D:CA:1E:54
Certificate issuer:       /CN=AE08ED5B65DE6FCD3501D910D574F54830060A99
Certificate serial:       7780752C97A75144955292483FD80A15C97D0DB4
Authority key identifier: AE:08:ED:5B:65:DE:6F:CD:35:01:D9:10:D5:74:F5:48:30:06:0A:99
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AE08ED5B65DE6FCD3501D910D574F54830060A99.cer
Subject info access:      rsync://krill.as218338.eepyinsi.de/repo/as218338/0/326131343a373538333a656663353a3a2f34382d3438203d3e20323138333338.roa
Signing time:             Fri 23 Oct 2026 18:31:54 +0000
ROA not before:           Fri 23 Oct 2026 18:26:54 +0000
ROA not after:            Fri 22 Oct 2027 18:31:54 +0000
asID:                     218338
IP address blocks:        2a14:7583:efc5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:80:75:2c:97:a7:51:44:95:52:92:48:3f:d8:0a:15:c9:7d:0d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE08ED5B65DE6FCD3501D910D574F54830060A99
        Validity
            Not Before: Oct 23 18:26:54 2026 GMT
            Not After : Oct 22 18:31:54 2027 GMT
        Subject: CN=524F5B15D725A47FE957A60B2C33171A8DCA1E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f6:17:99:24:ac:70:df:4c:ee:94:34:32:b8:
                    a3:43:28:76:c8:85:a3:a4:a0:d5:5a:f7:bb:f1:3d:
                    22:48:28:7a:20:fc:be:1b:80:f6:b0:72:f6:7f:75:
                    32:b4:f1:f8:02:9e:9a:91:70:a0:4a:44:31:cb:b3:
                    4b:07:e2:15:53:b9:2e:e3:91:a8:66:84:c7:72:4f:
                    d0:6a:44:8f:af:4e:be:46:6e:13:43:ac:26:4a:cd:
                    4f:63:19:a6:e3:1e:08:ff:13:bd:57:f4:ec:3f:2a:
                    aa:77:8a:ea:79:6f:65:84:ae:10:c8:f6:2d:22:b6:
                    fc:04:7f:54:eb:ed:55:27:29:6a:c6:e4:06:4c:e5:
                    51:76:94:3b:de:67:04:6e:c4:bc:d0:f4:43:54:7b:
                    c6:59:06:78:f0:bb:f2:56:b2:78:f7:eb:f3:a4:8b:
                    1e:12:f3:0b:ec:0c:41:77:df:95:8b:e6:a3:6e:a0:
                    56:2d:88:68:31:92:95:b0:2d:7f:d4:f8:5f:08:7b:
                    14:a0:cd:f2:1f:e5:9e:b4:f7:80:79:65:01:71:1b:
                    ad:30:92:f1:04:22:b9:0b:9f:8a:3c:8a:f3:51:04:
                    88:65:d2:52:bf:00:7b:e3:2b:ef:c3:85:a2:6d:6b:
                    0c:6b:87:04:3d:fb:1a:94:e3:0c:94:58:3d:e2:36:
                    9e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4F:5B:15:D7:25:A4:7F:E9:57:A6:0B:2C:33:17:1A:8D:CA:1E:54
            X509v3 Authority Key Identifier:
                keyid:AE:08:ED:5B:65:DE:6F:CD:35:01:D9:10:D5:74:F5:48:30:06:0A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.as218338.eepyinsi.de/repo/as218338/0/AE08ED5B65DE6FCD3501D910D574F54830060A99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AE08ED5B65DE6FCD3501D910D574F54830060A99.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.as218338.eepyinsi.de/repo/as218338/0/326131343a373538333a656663353a3a2f34382d3438203d3e20323138333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:efc5::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:70:f8:ba:23:06:e9:a9:d9:40:2f:6b:cb:25:a9:7b:cb:06:
         cc:2a:3a:77:58:a6:a6:61:79:00:61:e9:ed:82:2d:7f:59:f1:
         68:02:cd:3e:39:70:78:5b:0e:6c:f6:b6:68:0c:de:96:6f:38:
         ae:98:ff:9e:e6:23:5f:8d:f5:c8:8f:07:d6:73:5a:7f:18:9f:
         6a:67:eb:e6:75:da:0f:c1:b4:24:44:8d:bb:b6:fd:7c:42:0a:
         33:ce:be:cf:29:2d:99:a1:71:6f:7f:8f:87:a7:50:2a:67:6e:
         ff:2f:d3:3e:44:0d:ee:8b:64:38:56:8c:1a:c3:fa:68:02:98:
         b7:b4:6c:40:c5:7f:6d:43:91:35:52:87:ca:ed:a5:ff:08:21:
         92:b4:3c:54:8c:2f:cb:a9:a6:32:12:54:2c:26:ce:7c:db:eb:
         e8:cd:e3:6b:a0:0e:40:9a:ad:4d:98:91:6c:8c:50:05:6b:b1:
         64:2c:55:43:36:2e:15:e3:fd:c1:6c:30:42:3e:ac:06:91:03:
         17:ae:fb:79:7f:09:44:ae:69:0e:64:36:2d:8a:56:9a:7c:3b:
         28:90:d4:ad:03:5a:d8:7d:39:b5:d2:15:2b:dc:c3:36:ab:6e:
         e8:4c:b4:76:ce:02:93:2c:0e:4c:e3:43:f3:dc:d3:f4:82:bf:
         62:5b:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----